Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE81E/EA7820D8B08811F09C222B2EC4F9AE02/IXYFpd7eLWIvmK6mwvb5XY-uG2Y.mft
File:                     IXYFpd7eLWIvmK6mwvb5XY-uG2Y.mft (raw, json)
Hash identifier:          nIj7XfLgXEqU9tG2Xdp1HSVpcWzxj/jfktvE1AykFr4=
Subject key identifier:   9C:B0:B0:C2:9E:B8:16:07:FE:EC:9D:C5:6E:C2:8B:26:71:7D:F2:25
Authority key identifier: 21:76:05:A5:DE:DE:2D:62:2F:98:AE:A6:C2:F6:F9:5D:8F:AE:1B:66
Certificate issuer:       /CN=A91AE81E/serialNumber=217605A5DEDE2D622F98AEA6C2F6F95D8FAE1B66
Certificate serial:       4C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IXYFpd7eLWIvmK6mwvb5XY-uG2Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AE81E/EA7820D8B08811F09C222B2EC4F9AE02/IXYFpd7eLWIvmK6mwvb5XY-uG2Y.mft
Manifest number:          48
Signing time:             Sun 01 Mar 2026 09:46:59 +0000
Manifest this update:     Sun 01 Mar 2026 09:46:59 +0000
Manifest next update:     Sun 08 Mar 2026 09:46:59 +0000
Files and hashes:         1: IXYFpd7eLWIvmK6mwvb5XY-uG2Y.crl (hash: /W4jCibE2GqLkfqJacgb8SYsvCOsi2qGfVNeLniHMAw=)
                          2: 06048736B08B11F087892851C4F9AE02.roa (hash: lH1PbCUckjd4Z/IAYvlhe3AJ9Dotnfr+gAbzTEeakhg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AE81E/EA7820D8B08811F09C222B2EC4F9AE02/IXYFpd7eLWIvmK6mwvb5XY-uG2Y.crl
                          rsync://rpki.apnic.net/member_repository/A91AE81E/EA7820D8B08811F09C222B2EC4F9AE02/IXYFpd7eLWIvmK6mwvb5XY-uG2Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IXYFpd7eLWIvmK6mwvb5XY-uG2Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:46:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 76 (0x4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AE81E, serialNumber=217605A5DEDE2D622F98AEA6C2F6F95D8FAE1B66
        Validity
            Not Before: Mar  1 09:46:59 2026 GMT
            Not After : Mar  8 09:46:59 2026 GMT
        Subject: CN=69a40b13-5bc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:b6:a0:ac:cc:b0:82:db:25:0e:c2:a2:64:d2:
                    b6:11:67:36:f4:18:d1:10:3e:fa:73:35:81:e1:4a:
                    08:0f:28:09:e6:db:f9:06:8e:8f:f5:db:45:d8:cb:
                    68:93:0e:17:5c:32:40:05:ba:56:54:69:f5:21:d3:
                    42:da:db:07:f1:6a:e7:b2:c5:73:c8:26:6c:ed:12:
                    69:85:32:5a:65:cb:69:12:3f:3f:75:ea:c3:fd:21:
                    bc:b0:54:1a:b1:23:6e:59:08:b1:2b:dd:e2:be:1e:
                    f5:d4:e4:df:6d:57:c5:2a:e3:b6:83:12:9d:4e:fa:
                    06:ea:76:4e:07:37:f9:03:e0:c0:62:f1:91:44:e7:
                    34:ab:0c:44:38:ff:87:42:95:9e:ea:da:08:4a:40:
                    97:88:8c:c1:a3:20:6b:08:03:82:1a:43:95:85:97:
                    40:24:21:cf:5e:07:23:8c:44:c1:ff:66:56:c9:9c:
                    a8:b9:49:12:3f:e3:a9:e7:ec:b8:7e:51:59:12:a5:
                    f9:21:03:fb:44:69:1c:aa:93:6f:b7:ef:61:34:05:
                    68:05:00:6b:51:c4:a3:d5:66:36:28:d3:eb:c6:e1:
                    3d:bd:a0:fc:97:70:b6:0f:2b:6d:c6:00:22:b1:ee:
                    90:94:d7:61:a9:65:e0:19:f3:fe:8f:5f:60:d7:f2:
                    4c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:B0:B0:C2:9E:B8:16:07:FE:EC:9D:C5:6E:C2:8B:26:71:7D:F2:25
            X509v3 Authority Key Identifier:
                keyid:21:76:05:A5:DE:DE:2D:62:2F:98:AE:A6:C2:F6:F9:5D:8F:AE:1B:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AE81E/EA7820D8B08811F09C222B2EC4F9AE02/IXYFpd7eLWIvmK6mwvb5XY-uG2Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IXYFpd7eLWIvmK6mwvb5XY-uG2Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE81E/EA7820D8B08811F09C222B2EC4F9AE02/IXYFpd7eLWIvmK6mwvb5XY-uG2Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:54:ee:c6:bb:f9:d8:37:0e:d6:69:04:e2:36:56:c7:90:50:
         0d:b2:1b:23:1a:b0:69:55:d3:fc:46:6f:72:58:8e:e8:96:cc:
         5b:59:9b:ea:b3:30:59:aa:67:51:21:0b:31:71:c6:9c:1f:93:
         5a:f3:05:3a:7f:d0:6d:83:c9:66:f4:49:07:ba:44:94:11:0d:
         8e:a8:d6:a7:ab:5c:50:e1:c2:d6:8d:88:86:64:53:fb:f3:27:
         45:35:ff:2e:f1:97:33:b0:68:0e:6b:14:4a:b8:86:02:93:e6:
         2c:a3:6c:5b:3f:a0:02:b9:67:e8:bc:67:3f:ca:bf:c5:1a:9a:
         e0:16:9d:86:36:0e:4a:fe:f2:1b:b1:a5:8e:bb:1d:fc:1e:b9:
         09:4d:32:6c:2c:53:23:ea:87:ad:27:a6:59:f6:3a:58:0a:f5:
         94:02:42:55:06:02:22:9c:6d:25:80:1f:a7:29:1b:df:c7:0f:
         20:17:20:0a:61:8b:24:5e:6e:22:86:49:61:f7:e6:a8:90:70:
         7b:86:73:6a:3d:9d:85:46:b8:3e:6a:27:18:fc:8c:df:d1:40:
         5b:8c:17:14:05:e2:d1:c1:5e:8a:03:71:b5:7c:26:8b:95:5b:
         f4:16:3b:65:fc:a3:06:72:67:01:f1:00:3d:73:4e:65:16:2a:
         d4:93:8f:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:19:44 2026 by rpki-client